
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
File: tWQnMiZdQL91ypSp7IEZIRwbmzI.mft (raw, json)
Hash identifier: Kfb72stJUIxr+DCLPvrqlM2JL79YlImLaoweLhwCIkQ=
Subject key identifier: 8A:98:CA:22:35:2A:5A:52:DF:EC:AB:E2:CB:B9:73:3F:10:D1:94:CB
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 2CDA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
Manifest number: 2C2D
Signing time: Thu 16 Apr 2026 15:30:30 +0000
Manifest this update: Thu 16 Apr 2026 15:30:29 +0000
Manifest next update: Thu 23 Apr 2026 15:30:29 +0000
Files and hashes: 1: tWQnMiZdQL91ypSp7IEZIRwbmzI.crl (hash: E0tc4ylGTOCRd2BU5Q3xOqeuyWbmpMWzmqpLKOWQamA=)
2: DF821D20ABDE11ED954F5C84C4F9AE02.roa (hash: 7xfAOvY/afimILYTR9MKcTXThQYmTzbgBUbOIw10xYo=)
3: 13461F60ABDC11EDAE837666C4F9AE02.roa (hash: p1Xz4NfMi7vba2dX5mep6XS38eseQmptesScKzYLsfY=)
4: 4462F034F0EC11EB9D0B176AC4F9AE02.roa (hash: te6K7h74NKd0mHdVkf229ZoBYjiL4niibZWuwJlhYHM=)
5: E0CC928CABDE11ED954F5C84C4F9AE02.roa (hash: vy8OizIusjo0DOpKES3kAjShvdwNIST8mDHt7RP2/Rw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11482 (0x2cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128, serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: Apr 16 15:30:29 2026 GMT
Not After : Apr 23 15:30:29 2026 GMT
Subject: CN=69e10095-7747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:0b:2f:a2:87:1e:42:85:f1:14:01:18:eb:
21:7d:86:38:ac:94:b9:e7:09:8d:17:b3:ae:95:a8:
96:12:c7:7c:69:80:6f:e0:97:78:99:b7:be:8c:2a:
ed:ba:f1:b9:11:72:f2:a1:9d:e5:99:3b:81:b3:b2:
64:14:dd:d0:d2:d5:ce:6a:ca:5d:7b:25:29:79:4b:
ab:cc:0e:14:21:cd:e1:f6:50:d8:5e:2c:0f:4f:e1:
5a:8f:a4:88:88:a0:4d:02:09:a8:03:df:65:75:35:
9b:22:bb:d9:85:0e:e5:a7:22:c7:5e:2e:52:4b:8a:
46:39:bc:77:a6:d0:18:f6:cb:12:3b:9b:42:dc:8c:
67:c3:93:03:88:e4:c5:36:89:0e:af:d4:eb:3f:84:
e8:c6:97:03:b9:54:8c:47:f4:ef:2e:5a:64:8a:f5:
8d:3f:eb:0e:b4:fe:23:89:41:8a:91:35:4c:8b:96:
fe:0b:0d:6b:fc:e6:7e:81:45:c2:4d:93:1f:4a:b3:
03:78:52:46:da:c1:6f:ea:c2:c9:d3:6a:6b:42:8d:
2b:84:aa:81:82:d9:0b:7d:f8:5c:97:36:5a:10:99:
a8:c4:06:d5:19:06:72:4c:2a:e0:36:40:b5:95:35:
c5:13:ac:7b:05:99:14:4d:ba:8b:95:14:16:a5:0d:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:CA:22:35:2A:5A:52:DF:EC:AB:E2:CB:B9:73:3F:10:D1:94:CB
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c3:8b:8c:5d:57:20:15:09:6d:e3:a4:aa:cc:01:d7:41:9a:
4f:85:e5:13:a1:7d:30:7f:dc:1d:cc:e5:f0:92:9d:40:9d:62:
cf:fb:20:27:63:42:b2:9d:97:e8:21:20:d5:0c:8b:25:9a:6b:
fb:67:87:ed:0e:dc:58:43:ee:36:a2:37:38:7c:23:af:58:50:
37:f0:4a:7d:fc:38:dc:9b:4c:e2:db:f4:d4:bf:ba:ba:9f:84:
4e:ba:8b:07:61:8e:6a:cc:89:7d:8a:2a:f6:17:e2:87:9f:a5:
8c:56:1c:24:6a:bd:6e:e7:34:36:34:fd:87:40:95:12:e9:40:
1b:83:96:af:f5:6a:d5:f3:29:76:3a:cd:0a:d7:0e:11:78:bf:
23:07:18:17:d8:60:d8:ef:0e:fc:c3:e4:7d:8a:36:5e:0f:c4:
48:87:3c:b2:7d:a8:59:cf:29:db:7f:42:d6:e9:e4:f6:c5:20:
cd:9c:80:cc:d7:38:71:67:b9:95:2c:17:87:64:bf:62:05:e1:
ec:3b:a1:ea:11:84:b7:40:ab:6d:bb:26:62:7e:d3:6b:6c:e6:
5a:f1:70:63:63:dc:94:80:83:e0:2f:90:96:06:70:ba:e5:f2:
a9:e6:c6:75:46:a5:9e:dd:0a:2b:a2:17:ea:33:84:15:b3:83:
b6:2e:88:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:41:22 2026 by rpki-client